
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
The Watchful Python Package allows installation of the Watchful Python SDK over the internet from PyPI. The Watchful Python SDK enables communication with the Watchful API using Python and helps in the automation of Watchful Python features when used with the product.
The current features include the following and their corresponding user guides:
Watchful API and notebook
If you want to use Python to communicate with the Watchful API, you'll need to install the Watchful Python SDK from PyPI.
pip3 install watchful[==your.desired.version]
If you intend to enrich using either SpaCy or Flair, you can take advantage of the enrichers we ship with the library. To do so, specify enrich
when installing the library.
pip3 install watchful[enrich]
Once you have installed the SDK, import it and begin interacting with it.
For a more thorough Watchful API introduction, read through our API Introduction Jupyter Notebook.
The Watchful SDK aims to make enrichment a straight-forward task. The following steps assume a brand new user without any projects.
python3 -m pip install watchful
python3 -m pip install spacy
en_core_web_sm
model
python -m spacy download en_core_web_sm
python3 -m watchful.enrich --host localhost --port 9001
# Enter your actual host and port.
Note: Enrich via Jupyter Notebook - A more comprehensive guide to enrichment is available in the Enrichment Introduction Jupyter Notebook.
For more guides and documentation, see the ReadMe in the examples
directory.
If contributing to this code, you're encouraged to apply the following code practices.
cd to/the/repo_directory/that/being/watchful-py
pylama src/watchful/ -o pylama.ini
black src/watchful/ --config=pyproject.toml --diff
hatch build
--force-reinstall
to guarantee a full (re)installation)pip3 install dist/watchful-<latest.release.version>-py3-none-any.whl [--force-reinstall]
<latest.release.version>
can be found here.
pip3 show watchful
pip3 install -e . [--force-reinstall]
pip3 install watchful[==your.desired.version]
After you've done the preceding steps correctly, you will be able to see the following.
python3 -c 'import watchful; print(watchful.__version__);'
pytest -W ignore::DeprecationWarning tests/test_*.py -v
After you've done the preceding steps correctly, you will be able to publish Watchful Package to PyPI. Before cutting a release, ensure the release changes are communicated with engineering@watchful.io. There may be corresponding changes required in the Watchful application; do not worry about this as it will be taken care of by Watchful.
main
branch is updated and create a new branch:git checkout main && git pull && git checkout -b bump-version
git add src/watchful/VERSION && git commit -m 'bump version' && git push -u origin bump-version
main
after it is approved.Draft a new release
Choose a tag
Target
is set to main
(should be default)Previous tag
is set to the most current release tag (should be default)Generate release notes
Publish release
The release will be triggered and CI will automatically build and publish the Watchful Python Package to PyPI.
FAQs
Watchful API for Interacting with Watchful Environment
We found that watchful demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.